Edge Server Logs

Question

_{Thursday, November 15, 2018 4:41 PM}

Hi experts

One of the email has been received on email gateway but it did not receive on mailbox. how can i check in edge server for logs, and what logs do i need to check,  for example [email protected] has sent email to [email protected] and at email gateway it is released and the mail did not receive at mailbo

All replies (5)

_{Friday, November 16, 2018 8:36 AM ✅Answered}

Hi,

You can check the message tracking log in Edge Transport Server using the following command.
Get-MessageTrackingLog -sender <sender> -recipients <recipient> -server <edge server name>

Moreover, you can also view the protocol log of send connector that send emails to Mailbox Server in Edge Transport server. 
1. If Edge server has been subscribed to the Exchange organization by using EdgeSync, you should run the command in mailbox server to enable protocol log first. The changes are then replicated to the Edge Transport server next time EdgeSync synchronization occurs.

Set-SendConnector <connector name> -ProtocolLoggingLevel Verbose

2. After that, you can view the log under the path %ExchangeInstallPath%TransportRoles\Logs\Edge\ProtocolLog\SmtpSend in Edge Transport server.

Regards,

Dawn Zhou

Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].

Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

_{Thursday, November 22, 2018 2:43 AM ✅Answered}

Hi,

Sorry for late reply. What do you mean by "search in message tracking logs  for the words"? Do you search message tracking log based on specific words? As far as I know, it is impossible to do that. If that's the subject, you can add the messagesubject parameter in the command.

Get-MessageTrackingLog -sender <sender> -recipients <recipient> -server <edge server name> -MessageSubject <subject>

So the actual issue is that the mail enters in mailbox but the attachment disappear, right? According to ReasonData "policy is disabled" in the agent log, it seems that the content filter is not working here. Does the issue occur in Outlook or OWA? If it only occurs in Outlook, please check if you can see the attachment in OWA. 

Regards,

Dawn Zhou

Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].

Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

_{Sunday, November 18, 2018 1:23 PM}

i did search in message tracking logs  for the words Message rejected due to unacceptable attachments but i could not find this, does it mean that attachment is not stripped on edge servers.

_{Monday, November 19, 2018 3:44 PM}

 I could see one entry in agent log,(C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\AgentLog\AgentLog2018111)  but i am not sure what to search in agent log.

Content Filter Agent OnEndOfData AcceptMessage   SCL not available: policy is disabled.

_{Monday, November 19, 2018 6:35 PM}

Hi experts i can see the below log in agent log, could you help me understand, 192.168.1.1 is my edge server and 172.18.105.10 is my mailbox server, do Content Filter Agent on End of Data mean is the attachment stripped

email has been received but without attachment.  [email protected] has sent test.pdf file and it reached [email protected] with test.pdf.txt, when user has opened the file test.pdf.txt he can see the message the attachment has been removed. (test.pdf has been renamed to test.pdf.txt)